credentials.json.example

[
  {
    "type": "json",
    "path": "~/.aws/sso/cache/kiro-auth-token.json",
    "comment": "Kiro IDE credentials (JSON with refreshToken, accessToken, profileArn)"
  },
  {
    "type": "json",
    "path": "~/.aws/sso/cache/your-sso-cache-file.json",
    "comment": "AWS SSO OIDC credentials (JSON with clientId, clientSecret, refreshToken)"
  },
  {
    "type": "sqlite",
    "path": "~/.local/share/kiro-cli/data.sqlite3",
    "comment": "kiro-cli SQLite database (AWS SSO OIDC)"
  },
  {
    "type": "refresh_token",
    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...",
    "profile_arn": "arn:aws:codewhisperer:us-east-1:123456789012:profile/abc123",
    "region": "us-east-1",
    "comment": "Direct refresh token (from .env or Kiro IDE traffic)"
  },
  {
    "type": "json",
    "path": "C:\\MyAccounts\\kiro_jsons",
    "comment": "Folder with multiple credential files - all files will be scanned (non-recursive)"
  },
  {
    "type": "sqlite",
    "path": "~/kiro-accounts/",
    "comment": "Folder with multiple SQLite databases (kiro-cli) - all .sqlite3 files will be scanned (non-recursive)"
  },
  {
    "comment": "=== ADVANCED: Per-Account Parameter Overrides ===",
    "comment2": "The following examples show optional per-account parameters:",
    "comment3": "- profile_arn: AWS CodeWhisperer profile ARN (for Kiro Desktop auth)",
    "comment4": "- region: SSO region for OIDC token refresh (where AWS IAM Identity Center is located)",
    "comment5": "- api_region: Q API region for Q Developer API calls (where Q endpoints are available)",
    "comment6": "Use these only if you need different regions/profiles for different accounts.",
    "comment7": "- Also you can use optional ~enable~ parameter to disable individual accounts."
  },
  {
    "type": "json",
    "path": "~/.aws/sso/cache/account-eu.json",
    "enabled": true,
    "profile_arn": "arn:aws:codewhisperer:eu-central-1:123456789012:profile/xyz789",
    "region": "eu-west-1",
    "api_region": "eu-central-1",
    "comment": "ADVANCED: Account with custom regions (SSO in eu-west-1, Q API in eu-central-1)"
  },
  {
    "type": "sqlite",
    "path": "~/.local/share/kiro-cli/data-us.sqlite3",
    "enabled": true,
    "profile_arn": "arn:aws:codewhisperer:us-east-1:987654321098:profile/abc456",
    "region": "us-east-1",
    "api_region": "us-east-1",
    "comment": "ADVANCED: Account with explicit US regions"
  },
  {
    "type": "refresh_token",
    "refresh_token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.different_token...",
    "profile_arn": "arn:aws:codewhisperer:ap-southeast-1:111222333444:profile/def789",
    "region": "ap-southeast-1",
    "api_region": "ap-southeast-1",
    "enabled": true,
    "comment": "ADVANCED: Account with APAC region overrides"
  }
]